101-OpenSSL question..

Hi expert guys,.. :) I'm starting a class project which requires handling a packet after encryption it, and before transmi it to the IP layer. I want toto add a header and modify the current IP address of the packet. The steps -- in summery -- are as follow:

certificate for IPsec outlook

Dear all, I was able to create a certificate for my website successfully using openssl and this ssl-enabled website works fine so far. Recently, I tried to create certificate for IPsec and outlook but both failed. I import my CA's certificate to w2k. But my CA never appear in the list while

generating a certificate

hi i am very new to cryptography and i was trying my hands to generate a certificate using openssl but was not able to make one due to absence of any good tutorial. could some one provide a pointer to a detailed procedure in creating a certificate. I want to make a certificate for weblogic

Re: Apache and SSL

On Sat, 22 Dec 2001, Mike Brandonisio wrote: Hi, I wanted to post an answer to a problem I had with Apache and SSL. It took some time to figure this one out but here it is: PROBLEM: When I installed Apache and setup a virtual server for my test web site the standard HTTP requests worked

Re: 101-OpenSSL question..

On Mon, 24 Dec 2001 [EMAIL PROTECTED] wrote: Hi expert guys,.. :) I'm starting a class project which requires handling a packet after encryption it, and before transmi it to the IP layer. I want to to add a header and modify the current IP address of the packet. The steps -- in

RE: 101-OpenSSL question..

Simple but stupidWhy dont you just capture packets coming into a boxon the lower levels of the osi, modify the packet and send to the higher levels of the osi.. Why do you need to use OpenSSL Let us know .. give me some more hints.. Regards, Matthew Smith (MCSE,CNE,CCNA,CCIE)

X509 extensions checking.

Hi, All! Suppose I have a SSL server and I want to check the purpose of the client certificate, which means that I need to check the enhancedKeyUsage contents. What I've done is enumerated the X509 extensions by X509_get_ext_count() and X509_get_ext(), found the enhancedKeyUsage by OID

Re: 40 / 56 bit encyption

hi all, i've been having trouble with this pice of code, i get a segmentation fault when reading the public key, this is the way i generated both private and public keys. priv Key: openssl genrsa -out priv.key 1024 pub Key: cat pub.key | openssl rsa -pubout pub.key does anyone have any idea

Re: X509 extensions checking.

Alexey Kobozev wrote: Hi, All! Suppose I have a SSL server and I want to check the purpose of the client certificate, which means that I need to check the enhancedKeyUsage contents. What I've done is enumerated the X509 extensions by X509_get_ext_count() and X509_get_ext(), found the

RE: X509 extensions checking.

Hi! Err start again :-) Oops, sorry, I didn't see thread about it. Purpose checking is done automatically in the newer releases of OpenSSL as part of the client certificate verify process, including checking extendedKeyUsage. Several checks take place, currently documented in the x509

PEM_read_RSAPublicKey

hi all, i've been having trouble with this pice of code, i get a segmentation fault when reading the public key, this is the way i generated both private and public keys. priv Key: openssl genrsa -out priv.key 1024 pub Key: cat pub.key | openssl rsa -pubout pub.key does anyone have any idea

Re: PEM_read_RSAPublicKey

Ricardo Guerra wrote: hi all, i've been having trouble with this pice of code, i get a segmentation fault when reading the public key, this is the way i generated both private and public keys. priv Key: openssl genrsa -out priv.key 1024 pub Key: cat pub.key | openssl rsa -pubout

Re: Seems to be a bug with EVP_get_cipherbyname(p)

chris mollis wrote: so far so good (I hope).. when I use the function PEM_Read_PrivateKey(fp, null, null, null) to construct the key, it always returns null. When I debugged it, I found that EVP_get_cipherbyname() called in PEM_get_EVP_CIPHER_INFO() always returns NULL when passed the

Re: PEM_read_RSAPublicKey

thanks :) pubKey is supposed to be used to decrypt a string previously encrypted with the privateKey (rsa_private_encrypt).. by the way... is it possible? i have seen some code and openssl itself to encrypt using public key and decrypt using the private key... El Miércoles 26 Diciembre 2001

Question on SSL_dup...

I am adding TLS support to one of our servers, and for some legacy reasons i need to share the main SSL pointer across several threads. in the dispatcher thread i use SSL_dup and then allow the worker threads to free the dup'ed SSL object when it is done... however, SSL_write's on the dup'ed

Re: basic constraints extension

Hi, Schor, Bella wrote: HI, can please anybody help me with using this extension? I try to create and sign a certificate. I define basicConstraints=CA:true, and that's ok. When I add (pathLengConstraint:0) I receive an error message that this name is unknown. What can I do to make it

RE: basic constraints extension

can please anybody help me with using this extension? I try to create and sign a certificate. I define basicConstraints=CA:true, and that's ok. When I add (pathLengConstraint:0) I receive an error message that this name is unknown. What can I do to make it work? Try